Trust
Trust is an architectural decision, not a feature.
These are the principles that shape how XiMCO products are designed and operated. We describe the approach rather than sensitive implementation detail.
Principles
How we protect your operation.
Eight commitments that shape design decisions before a single screen is drawn.
Least privilege
Roles begin with the narrowest useful access. Additional rights are granted deliberately, per product and per location, rather than inherited by default.
Clear trust boundaries
Each product enforces its own domain rules. Nothing crosses a boundary implicitly, and no product reaches into another product's storage.
Auditability
Administrative and operational changes are attributable to an actor and a moment in time, so questions about what happened have answers.
Secure integrations
Connections between products are registered, authenticated and versioned. Consumers are identified, and access follows the entitlements defined in XiMCO Central.
Financial integrity
Payment and accounting states move forward through valid transitions only. Corrections are recorded as entries rather than silent edits.
Privacy-aware design
Guest, customer and employee data is scoped to the roles that need it, with retention and visibility considered as part of product design.
Reliability
Operational workflows are built to survive interruption — state is preserved through device handoffs, and recovery paths are part of the design.
Responsible disclosure
We welcome reports of suspected security issues and treat them as a priority. Contact us and we will respond directly.
Policies
Privacy and terms, in plain language.
High-level summaries. For the documentation that applies to your organization, contact us.
Questions about security or privacy?
We'd rather answer them early. Send the specifics and we'll respond directly.